This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa File: 53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa (raw, json) Hash identifier: rpu6zmV+NnK/8HM6/fwQiRkM/6fGki97WJ7cENlGlGQ= Subject key identifier: 25:5D:9E:A3:54:47:DD:D0:B8:A6:D0:FE:D2:85:F1:04:36:FF:B7:AB Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C22C0E8DD318805FF6BF3CB90 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 398823 IP address blocks: 107.149.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e8:dd:31:88:05:ff:6b:f3:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=0c442d2e-0d41-4ad8-a8d2-7ce13aa9f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:1b:71:5a:6a:27:55:47:f3:a8:47:89:47: 04:ad:9b:dc:29:bf:4d:af:65:43:81:f8:f7:5e:08: 2d:d3:5a:48:9a:cc:f0:2b:a0:7b:9b:21:7a:c7:7d: 9a:fe:bb:d5:d5:89:b6:12:97:ec:4f:a0:14:bd:5c: a1:8d:80:9b:67:6a:9d:06:a4:99:df:7d:18:cb:3c: 05:7a:d5:d8:6c:f4:27:97:01:4c:0f:d1:15:2f:f6: 5c:b1:02:40:7b:d6:21:b2:26:bf:02:d9:94:3f:60: f0:9a:fa:49:85:5d:12:9a:3c:d6:f1:6b:4e:7e:c9: 9f:48:23:a4:0d:fa:bb:d8:0f:28:2d:73:1d:e4:da: 42:32:25:b5:74:d0:4d:ee:98:5d:9f:fb:3e:80:05: 0f:0b:e0:22:6f:85:2c:8d:a1:58:f1:71:46:95:2b: 17:0a:6e:a8:17:13:37:bd:0d:1c:b1:af:04:80:48: b3:4a:c6:ce:79:1e:85:83:8d:f4:68:b8:9a:fa:22: 66:dd:8a:62:a2:1b:da:3c:86:b5:76:a7:46:56:32: 6b:1e:f8:63:a4:fd:45:09:33:c5:3d:c4:16:d5:b8: c8:fa:e2:c0:bb:6e:ab:33:3c:57:0f:63:6d:66:d6: 02:d8:77:68:8d:e2:bf:bb:60:c1:6e:f5:6e:ef:dc: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:9E:A3:54:47:DD:D0:B8:A6:D0:FE:D2:85:F1:04:36:FF:B7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0b:fd:e4:cf:67:ec:e2:51:1e:a0:ba:03:23:83:5e:0d:e3: 79:e4:f9:73:36:43:66:c2:e3:80:b6:cc:a2:f5:dd:eb:a4:43: b6:d5:ba:5d:62:b5:84:d3:1a:41:47:9d:df:31:b7:a5:9e:4d: 6a:51:3f:08:66:47:df:f4:7e:69:71:3b:c3:a6:b7:88:10:81: 4c:97:b0:b5:6c:54:92:01:9b:d5:5b:50:cb:d6:59:86:a0:95: 0b:59:d8:1a:af:2c:3f:14:d0:03:5c:f3:46:70:ca:db:2d:5f: a4:99:59:ff:de:e7:ab:4f:c1:03:5c:4c:5e:0b:20:d6:65:92: 70:90:27:6d:38:cc:43:60:33:f6:d3:97:de:9d:21:49:aa:70: 1c:f5:39:1a:6a:5c:5e:89:89:24:d6:44:b5:f8:85:08:21:ec: 34:83:85:66:77:1c:b0:7e:5c:f3:01:04:68:6c:88:37:af:11: 59:3e:25:4a:7e:a8:39:1c:43:3d:73:b2:fd:7c:fa:b1:a8:39: 97:ee:6d:a9:56:87:c7:2d:f7:dd:be:2f:82:08:f1:0a:9d:3e: c1:61:c9:fe:55:29:ab:d6:36:8a:26:57:78:f0:d3:2c:77:e5: 1b:bf:e7:9f:c6:2d:ec:dd:6b:e8:bb:2c:43:9c:8b:11:8c:30: 9f:63:d4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOjdMYgF/2vzy5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk MGM0NDJkMmUtMGQ0MS00YWQ4LWE4ZDItN2NlMTNhYTlmMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQQbcVpqJ1VH86hHiUcErZvcKb9Nr2VDgfj3 Xggt01pImszwK6B7myF6x32a/rvV1Ym2EpfsT6AUvVyhjYCbZ2qdBqSZ330YyzwF etXYbPQnlwFMD9EVL/ZcsQJAe9Yhsia/AtmUP2DwmvpJhV0SmjzW8WtOfsmfSCOk Dfq72A8oLXMd5NpCMiW1dNBN7phdn/s+gAUPC+Aib4UsjaFY8XFGlSsXCm6oFxM3 vQ0csa8EgEizSsbOeR6Fg430aLia+iJm3YpiohvaPIa1dqdGVjJrHvhjpP1FCTPF PcQW1bjI+uLAu26rMzxXD2NtZtYC2HdojeK/u2DBbvVu79ybowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVdnqNUR93QuKbQ/tKF8QQ2/7erMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTNjNjg1Y2UtMGRjOS0z YWNjLTgxYWYtMGRmOGZiNTdhOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgL/eTPZ+ziUR6gugMjg14N43nk+XM2Q2bC44C2zKL13eukQ7bVul1i tYTTGkFHnd8xt6WeTWpRPwhmR9/0fmlxO8Omt4gQgUyXsLVsVJIBm9VbUMvWWYag lQtZ2BqvLD8U0ANc80ZwytstX6SZWf/e56tPwQNcTF4LINZlknCQJ204zENgM/bT l96dIUmqcBz1ORpqXF6JiSTWRLX4hQgh7DSDhWZ3HLB+XPMBBGhsiDevEVk+JUp+ qDkcQz1zsv18+rGoOZfubalWh8ct992+L4II8QqdPsFhyf5VKavWNoomV3jw0yx3 5Ru/55/GLezda+i7LEOcixGMMJ9j1EM= -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:52 2025 by rpki-client